MAL-001

MAL-001: FreeMarker Server-Side Template Injection in Liferay Portal In Liferay - Portal =7.4.3.12-ga12 wurde ein Problem entdeckt. Durch das Einfügen schädlicher Inhalte in die FTL-Templates kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die offengelegte...

CVE-2019-1064

CVE-2019-1064 CVE-2019-1064 - AppXSVC Elevação Local de Privilégio Parece que isso pode não estar tão corrigido quanto o esperado. PoC temporariamente indisponível...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco In Hyland Alfresco Community Edition =7.2.0 wurde ein Problem entdeckt. Durch das Einfügen von schädlichem Inhalt in die Datei folder.get.html.ftl kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die...

CVE-2023-43208

Vulnerabilidade de RCE no Mirth Connect CVE-2023-37679 e CVE-2023-43208 Este script de exploit e PoC foram escritos para uma análise aprofundada da CVE no vsociety. A CVE-2023-43208 é uma falha de segurança grave no NextGen Mirth Connect, uma ferramenta usada por hospitais e clínicas para...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 PoC de RCE do JSONPath-plus ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Configuração do Laboratório root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Eine kleine Erklärung eines Apache-Pfad-Traversal-Bugs und einer unvollständigen Behebung Task 1: Ein bisschen Hintergrund... Eine kurze Geschichte Am 5. Oktober 2021 wurde eine CVE veröffentlicht, d...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Angriff Beschreibung Es wurde festgestellt, dass der Fix für CVE-2021-44228 in Apache Log4j 2.15.0 in bestimmten nicht standardmäßigen Konfigurationen unvollständig war. Dies könnte Angreifern, die Kontrolle über die Eingabedaten der Thread Context Map MDC haben,...

CVE-2023-34152

CVE-2023-34152 ImageMagick 6.9.6-4 को प्रभावित करने वाली RCE कमजोरी। यह कमजोरी हमलावर को पीड़ित सिस्टम पर कमांड निष्पादित करने की अनुमति देती है। इस प्रकार, रिमोट कमांड निष्पादन संभव होता है। यह एक POC है जो fullwaywang द्वारा CVE-2023-34152 की खोज से प्रेरित है। कमजोरी का खुलासा root@kitploit:...

CVE-2026-57171 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

Trestle (compliance-trestle), a Python SDK and CLI for managing OSCAL compliance documents, is affected by an arbitrary file write via path traversal in the catalog-generate, profile-generate, and ssp-generate author commands. The output argument is joined onto the Trestle root but guarded only b...

CVE-2026-65637

Apache Tomcat is affected by an Improper Input Validation vulnerability that allows an HTTP/2 no-authority bypass of strict SNI validation . The root cause is an incomplete fix for the prior vulnerability CVE-2026-32990 . Affected versions span three branches: 11.0.20–11.0.24 , 10.1.53–10.1.57 , ...

Log4j_CVE-2021-45046

Log4j 2.15.0 Privilegienausweitung -- CVE-2021-45046 Angriff Beschreibung Es wurde festgestellt, dass der Fix zur Behebung von CVE-2021-44228 in Apache Log4j 2.15.0 in bestimmten nicht standardmäßigen Konfigurationen unvollständig war. Dies könnte Angreifern, die Kontrolle über die Thread Context...

EUVD-2026-65532

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

httpd-2.4.49

httpd-2.4.49 kritisch: Path Traversal und Remote Code Execution in Apache HTTP Server 2.4.49 und 2.4.50 unvollständiger Fix von CVE-2021-41773 CVE-2021-42013...

CVE-2019-16278

Exploits für CVE-2019-16278 und CVE-2019-16279 Nostromo httpd ist anfällig für 2 kritische Schwachstellen in Versionen &1 Dieser Fehler ist auf eine unvollständige Behebung von CVE-2011-0751 zurückzuführen. Wir können eine Prüfung auf umgehen, was es uns erlaubt, mit beliebigen Argumenten...

CVE-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

EUVD-2026-65310

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...